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N THE CLAIMS: 

Kindly replace the claims of record with the following full set of claims: 

1 . (Previously presented) A system for copy protecting information, the system 
comprising: 

a point of deployment module; and 

a set-top box including; 

wherein the set-top box transmits a request message for information, the point of 
deployment module generates a reply message which includes at least one control 
information pair, relating to the information, each control information pair having copy 
control information and a stream identifier, respectively generating a first key in the point 
of deployment module and a second key in the set-top box, using information associated 
with each respective device and the at least one control information pair, and the point of 
deployment module encrypting the information with the first shared key and transmitting 
the encrypted information to the set-top box, and the set-top box decrypting the encrypted 
information with the second shared key when the first and second shared keys match. 

2. (Previously presented) A method of copy protecting information 
transmitted between a deployment module and a host device, the method comprising the 
steps of: 

(a) transmitting a request message for the information from the host device to the 
deployment module; 
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(b) transmitting a reply message from the deployment module to the host device, 
wherein the reply message includes at least one control information pair, each pair having 
a copy control information and a stream identifier; 

(c) generating a first shared key at the host and a second shared key at the 
deployment module, respectively, using information associated with each respective 
device and the at least one control information pair and an encryption means; 

(d) encrypting, in the deployment module, the information; 

(e) transmitting the encrypted information from the deployment module to the 

host; 

(f) decrypting, at the host, the encrypted information; and 

(g) receiving the information at the host when the first and second shared keys 

match. 

3. (Original) The method of claim 2, wherein the deployment module is a 
point of deployment module. 

4. (Original) The method of claim 2, wherein the host is a set-top box. 

5. (Original) The method of claim 2, wherein the encryption means includes 
a hash function. 

6. (Original) The method of claim 2, wherein the encrypted information in an 
elementary stream of information is encrypted with the first shared key. 
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7. (Original) The method of claim 6, wherein the stream identifier that is 
transmitted to the host is incorporated with the Packetized Elementary Stream (PES) 
header of the elementary stream. 

8. (Previously presented) A deployment module for use with a host device, 
the deployment module comprising: 

means for communicating with the host device; and 

a processor for, in response to a request message for information from the host 
device, generating a reply message to the host device, the reply message including at least 
one control information pair, each pair having copy control information and a stream 
identifier, generating a first shared key using information associated with the deployment 
module and the at least one control information pair, encrypting the information with the 
first shared key and transmitting the encrypted information to the host device. 

9. (Original) The deployment module of claim 8, wherein the deployment 
module is selected from the group consisting of a point of deployment module, wireless 
data interface appliance, smartcard, personal computer or internet interface appliance. 

10. (Original) The deployment module of claim 9, wherein the host device is a 
set-top box. 
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1 1 . (Original) The deployment module of claim 1 0, wherein the encrypted 
information is transmitted to the host device using a transport stream, wherein the 
transport stream includes at least one elementary stream. 

12. (Original) The deployment module of claim 11, wherein respective ones 
of the at least one control information pairs is associated with respective ones of the at 
least one elementary streams. 

13. (Previously presented) A host device for use with a deployment module, 
the host device comprising: 

means for communicating with the deployment module; and 
a processor for generating a request message for information to the deployment 
module, and in response, receiving a reply message from the deployment module, 
wherein the reply message includes at least one control information pair, each pair having 
copy control information and a stream identifier, generating a second shared key using 
information associated with the host device and the at least one control information pair, 
and decrypting encrypted information, received from the deployment module, with the 
second shared key, and receiving the information when the second shared key matches a 
first shared key generated in the deployment module. 

14. (Original) The host device of claim 13, wherein the deployment module is 
selected from the group consisting of a point of deployment module, wireless data 
interface appliance, smartcard, personal computer or internet interface appliance. 
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15. (Original) The host device of claim 14, wherein the host device is a set-top 

box. 

16. (Original) The host device of claim 13, wherein the received encrypted 
information is included in a transport stream, wherein the transport stream includes at 
least one elementary stream. 

1 7. (Previously Presented) The host device of claim 1 6, wherein respective 
ones of the at least one control information pairs is associated with respective ones of the 
at least one elementary streams. 

1 8. (Previously presented) An article of manufacture comprising a computer 
readable medium in which resides a computer program, said article being part of a 
deployment module for use with a host device, said program comprising: 

instruction means for communicating with the host device; and 
instructions for, in response to a request message for information from the host 
device, generating a reply message to the host device, the reply message including at least 
one control information pair, each pair having copy control information and a stream 
identifier, generating a first shared key using information associated with the deployment 
module and the at least one control information pair, encrypting the information with the 
first shared key and transmitting the encrypted information to the host device. 

19. (Previously Presented) The system of claim 1, wherein to use the at least one 
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control information pair in the generating of said second key the set-top box receives a 
transmission of said at least one control information pair, the respective copy control 
information of said at least one control information pair not being encrypted for the 
transmission. 

20. (Previously Presented) The method of claim 2, wherein step b) is executed 
without encrypting said copy control information of said at least one control information 
pair. 

21. (Previously Presented) The deployment module of claim 8, wherein said copy 
control information of said at least one control information pair in the reply message is 
unencrypted upon transmission to the host device. 

22. (Previously Presented) The deployment module of claim 8, wherein the 
information to be encrypted comprises content information. 

23. (Previously Presented) The deployment module of claim 22, wherein said 
content information comprises content information of an elementary stream, said stream 
identifier being an identifier of an elementary stream. 

24. (Previously Presented) The system of claim 1, wherein said stream identifier 
uniquely identifies an elementary stream that is assigned said copy control information. 
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25. (Previously Presented) The system of claim 24, wherein said stream identifier 
is within a Packetized Elementary Stream (PES) header of the elementary stream. 

26. (Previously Presented) The system of claim 25, wherein the encrypted 
information to be transmitted to the set-top box includes said header, said set-top box 
being configured to retrieve said stream identifier from said header. 

27. (Previously Presented) The host device of claim 13, wherein said stream 
identifier uniquely identifies an elementary stream that is assigned said copy control 
information. 

28. (Previously Presented) The host device of claim 27, wherein said stream 
identifier is within a Packetized Elementary Stream (PES) header of the elementary 
stream. 

29. (Previously Presented) The host device of claim 28, wherein the encrypted 
information to be received includes said header, said host device being configured to 
retrieve said stream identifier from said header. 

30. (Original) The system as recited in claim 1, wherein the information 
associated with each respective device is a random number generated by each respective 
device. 



